network
RMM and remote-access owners can confirm whether ScreenConnect was used to push rogue clients and SCKit, then lock technician access before the…
CISA cataloged an exploited SonicWall SSL VPN flaw that can bypass SAML-enforced MFA. The fix is a SonicOS upgrade, but hybrid identity design needs the same urgency.
Find Alpine, container, and edge SSH hosts exposed to SSHole, then update OpenSSH and restart sshd. Disabling password logins is the fallback if you cannot patch yet.
Crédit Mutuel Arkéa confirmed attackers used a supplier platform to move funds from the bank’s own account. A statement said other institutions potentially allowed conversion to cryptocurrency. Customer assets were not affected.
CISA confirmed active exploitation of WordPress Core flaw CVE-2026-119977 and added it to the KEV catalog. Federal civilian agencies must remediate by November 6, 2026.
mSeven Software emailed current and former mSecure users on November 3, 2026, about suspicious activity. Steps may include password, 2FA, and passkey changes, but the notice does not say whether vaults were accessed.
